password server?

[mufka]

Is there a way to setup a server to allow users to change their passwords? I have an apache web server running on Redhat 6.1 with virtual hosts that I'd like to allow users to change passwords. I also have a sendmail server I'd like to do the same on. Is there a good/secure way to do this without letting them into a shell?

[freebsd]

Are you talking about changing the FTP password? Why don't you try Proftpd? Users can authenticate against a database or plaintext file and it's easier to write a program to change the password.

>> Is there a good/secure way to do this

It's possible if you run a SUID root program but very insecure. Not to mention changing system passwd, authenticate against /etc/passwd from the web is insecure enough.